Enlink - Security Operations Center Administrator - Endpoint Detection & Response

Company Description :

Enlink Managed Services, founded by the promoters of Jaysynth, is deeply embedded in the transformation of the digital world. Starting in 2000, we initially provided technical support, customer service, and billing management. Following strategic acquisitions and partnerships, we expanded our services into IT Training & Placement, Cloud & Managed IT Services, Digital Marketing Services, and Staff Augmentation. We focus on meeting core business needs and enabling growth through technology and digital media.

Role Description

Work Mode : Work From Office

Working Shifts : Need to work in day shifts (Any 9-hour shift between 8AM and 10 PM)

About the Role :

Key Responsibilities :

- Coordinate incident resolution with internal and external stakeholders.

- Develop, refine, and implement robust security policies, procedures, and incident response strategies.

- Identify and drive improvements within SOC operations and processes.

- Conduct regular performance reviews and assessments of security systems.

- Lead post-incident reviews to identify and implement areas for improvement.

- Provide strategic insights and recommendations to bolster the overall security posture.

Qualifications, Skills & Experience :

Technical Expertise :

- Advanced proficiency in handling security incidents and leading complex investigations.

- Demonstrated experience in optimizing SOC operations.

- Expertise in implementing and enforcing security protocols and policies.

- Strong understanding of Malware Reverse Engineering, Exploit Development, Security Breach

Investigation, and Threat Hunting.

- Proficiency in using SIEM (preferably ArcSight), IDS/IPS, and other security tools.

- In-depth knowledge of security operations and advanced threat analysis.

- Familiarity with Cyber Forensics principles.

- Strong leadership skills with the ability to influence and drive security initiatives.

Certifications (Any one of the following) :

- Certified Information Security Manager (CISM)

- GIAC Certified Enterprise Defender (GCED)

- Certified Information Security Auditor (CISA)

- GIAC Enterprise Vulnerability Assessor (GEVA)

- Certified Incident Handler (ECIH)

- CompTIA Cyber Security Analyst (CySA+)